Security Stuff

Safe banking

Online PIN reset

Your PIN gets you IN. Your Login ID and banking PIN protect your Account from unauthorized access. If you've forgotten your Login details, you can reset them online by answering several questions to identify whether you are really you (and not someone posing as you). The reset process can be started by hitting the ‘Forgot Login ID’ or ‘Forgot PIN’ links from the Login page.

Digital signup

Our Mobile Banking app can provide a safe way to become a Tangerine Client completely digitally, without leaving your home or having to phone in footnote dagger. The steps involve scanning your ID (Canadian Driver’s Licence or Provincial Photo ID Card) and taking a selfie to validate your identity. Please note that images you send us will be securely disposed of, once we confirm your identity. More information can be found in our Digital ID Verification Terms.

2-Step Authentication

Set up 2-Step Authentication for an extra layer of security. Whenever you log into your Tangerine Account on a new device, we can send you a unique Security Code that you’ll need to enter, along with your PIN, to access your Account(s). Once registered, you can take comfort knowing that anytime someone tries to log in as you, a Security Code will be sent to the mobile number we have on file.

SecureChip

Your Tangerine Client Card and Tangerine Credit Card contain an embedded microchip to enhance safe and secure banking. Using proven technology, your Card helps protect your Accounts and personal information from fraud and theft.

Zero Liability Policies

Your Tangerine Client Card and Tangerine Credit Card are protected by the Interac Zero Liability, Visa Zero Liability or the Mastercard Zero Liability Protection policies (based on your payment method). This means you won't have to worry about paying for unauthorized purchases, including those made using your Card’s contactless payment feature, in most cases. It’s important to review your banking statements regularly. If you notice any suspicious transactions or suspect unauthorized use of your Card or Account, please call us right away at 1-888-826-4374.

Protecting yourself online

Downloading software

Beware of offers for free online software such as those that improve your computer's internet speed or allow you to watch movies for free. This type of software may be infected with Malware (malicious software) that enables fraudsters to monitor your activities or capture personal information. In some cases, downloading the software can enable scammers to intercept the data entered between your device and the websites you visit – capturing your credentials and personal information. If you need certain software, only download it from reputable companies and websites.

Password protection

Website passwords and PINs help identify who you are. Keep your passwords/PINs for all of your accounts and the sites you visit safe at all times. Never write down or share your passwords or PINs with anyone. When selecting a password/PIN, avoid choosing numbers or letters that fall in a sequence or pattern. Also, avoid the obvious choices like your birth date, address or family names. When selecting a security question, make sure it's something meaningful, so you'll remember it, and personal, so nobody else can figure it out.

Online Purchase Authentication

When using your Tangerine Client Card or Tangerine Credit Card online, we may use Online Purchase Authentication to help us verify that purchases are legitimate and being made by you. Online Purchase Authentication uses a one-time security code sent by text message that you’ll be prompted to enter as you complete the transaction. This extra step helps ensure that the person using your Card is you and helps protect you from fraud. Make sure your contact information under ‘Profile & Settings’ is up to date, since we send these messages to the mobile number we have for you on file.

Other helpful tips to protect yourself online

  • Protect your electronic devices by installing anti-virus, anti-malware software and by keeping your software up-to-date.
  • Set up a firewall on your home internet to limit unauthorized access.
  • Always use secure passwords and avoid using the same password for multiple websites. The safest passwords often contain a mix of special characters, numbers and uppercase/lowercase letters, which make them harder to guess.
  • When shopping online, choose reputable retailers that provide a street address, a working phone number and offer clear return policies.

If you suspect unauthorized use of your Tangerine Account(s), including your PIN, please call us right away at 1-888-826-4374.

Suspicious communications

Requests for confidential information

Tangerine will never send you an email or text message asking for your Client Number, Account Number, Secret Questions or PIN. If you ever receive an email or text message that asks for any of these things, it’s smart to be suspicious of it, and we ask that you forward the suspicious email to us at phishing@tangerine.ca or call us at 1-888-SAFE-304 (1-888-723-3304).

Phishing

Phishing scams occur when fraudsters send emails pretending to be someone they’re not, so that they can trick you into revealing your personal information (i.e. usernames, passwords or PINs) or install malware on your device. These emails will often appear to come from a legitimate source and will prompt you to unknowingly click a malicious link or open an infected attachment. Phishing emails have become more sophisticated, with typos/grammatical errors no longer being the main warning sign. Don’t reply to the message or use any contact information it provides. If the message is claiming to be from Tangerine, contact us at phishing@tangerine.ca or call us at 1-888-SAFE-304 (1-888-723-3304).

Smishing and Vishing

Smishing is similar to phishing except the messages are received via text message or SMS (Short Message Service) instead of email. Vishing (voice phishing) is another type of phishing but is conducted over the phone. Both types of scams will prompt you to provide personal information and will often have a high sense of urgency.

Think twice before putting that cheque in the mail…

Sure, the letter looks legitimate, but is it? Are you being asked to send in money or provide confidential information? If so, you may be looking at a case of attempted mail fraud. Fraudsters use several tactics to trick you, including:

  • Get-rich-quick schemes
  • Fake charity solicitations asking for donations
  • Prize winnings that require you to pay for shipping expenses

Remember, when in doubt, contact the organization the letter claims to be from to confirm if it’s real.

Pagejacking

One way criminals try to scam you out of your user names and passwords is by creating a copy of a site’s login page. The fake version will look an awful lot like the real thing, so be extra aware when visiting sites before you enter your login details.

Account takeover

If a fraudster does manage to steal your personal information, their next move is to gain access to your online Accounts. They can really do damage by making purchases, withdrawing your money or even changing the details of your Account.

Vacation fraud

This particular scam involves a fraudster hacking into your email. They then send emails telling your contacts you were robbed while on vacation and urgently need them to send you money right away.

Online shopping fraud

Ever see an offer online or receive an email with a product offering that sounds too good to be true? Then there’s a real chance that it is. Fraudsters pose as sellers offering items for an amazing price or with free shipping, but all they’re after is your money.

Fake websites

Hackers have become quite creative at finding ways to separate you from your personal information. Fraudulent emails and online ads that direct you to fake websites can appear scarily real. The problem is they’re designed to trick you out of your financial information such as Credit Card or bank Account details. But by being cautious and alert, you can avoid being taken in. Look for the following:

  • The website looks poorly designed and/or has broken links.
  • You can’t find contact information.
  • The website doesn’t outline clear sales, shipping and privacy policies.
  • The back button is disabled - being stuck on a page without being able to go back is usually a red flag.
  • You’re being asked for your Credit Card information before you make a purchase.

Fake apps

An increasing number of retailers and service providers require or encourage you to download their own app to do business with them. But just like websites, apps can be duplicated by fraudsters with the intent to steal your personal information. Watch for these tip-offs that the app could be a scam:

  • The name of the app publisher is different from the retail app and/or the spelling is incorrect
  • The app doesn’t have user feedback or ratings.
  • The app requires several permissions to install.
  • The app has multiple pop up ads and/or keeps prompting you for your personal information.

Not sure that website or app is legit? Google the company and see what comes up in your search. Send an email or call the phone number listed to see if they’re really who they say they are.

Some ways to spot a scam:

  • Check the source: Is the message from an unknown or suspicious person?
  • Check the links: Does the website URL start with "https" and display a tiny padlock icon in the address bar to signify it’s secure?
  • Check the language: Is the message demanding urgent payment or threatening to contact authorities?

Unsure if a communication you receive is legitimate? Give us a call at 1-888-826-4374 (or go to our Contact Us page) to confirm if it’s a real communication from us.

Want to learn more? Here are a couple of articles from our Forward Thinking blog that provide some more information on what to look out for: Job Scams: Know the Red Flags, COVID-19 Scams to Watch Out For and Protecting Yourself Against Fraud.

Protecting your identity

Phone Scams

Banks and government agencies will never request gift cards or prepaid cards in payment of a debt or bill. If you ever receive a suspicious call, don't provide any personal or sensitive information and get in touch with the organization they claim to be representing. You can call our online security line at 1-888-SAFE-304 (1-888-723-3304).

Identity theft

Identity and information theft is a serious problem facing consumers and businesses today. Hackers are no longer interested in breaking into computer systems and causing them to crash. Instead, they want to keep a system up and running so they can steal information from it, or use it as a launch pad for attacks against other computers. If your identity is 'stolen' you may find yourself with a poor credit rating as the fraudster has taken out loans, credit cards, etc. in your name. If you notice any abnormal activity in your financial records, don't hesitate to contact your financial institution to follow up. You can reach our online security line at 1-888-SAFE-304 (1-888-723-3304).

Card skimming

Credit and debit card fraud can happen at bank machines, A B M's and retailers virtually anywhere. Make sure whenever entering a PIN into a machine you keep it private and keep your eyes open for suspicious-looking devices attached to the machine so you don’t unknowingly help thieves gain access to your account.

Other helpful tips to protect your identity

  • Be suspicious of requests for your personal information. If in doubt, contact the organization on another verified channel to confirm it’s real.
  • Sign up for credit report monitoring, or review it yourself by obtaining a copy of your credit report from a credit bureau, to check for unauthorized use of your identity.
  • Review your transaction history and banking statements regularly. If you notice any suspicious transactions let your financial institution know right away.
Want to learn more about fraud prevention?

Legal Stuff

footnote dagger Some conditions may apply. Service is subject to availability and successful digital verification.

‡ Some conditions apply, see your Account Terms and Cardholder Agreement for more details.

Interac is a registered trademark of Interac Corp., used under licence.

Mastercard is a registered trademark of Mastercard International Incorporated, used under licence.

* Visa Int./ Licensed User.